CVEvulnerability
CVE-2006-5821
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2006-11-10
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
Description
Heap-based buffer overflow in the IMA_SECURE_DecryptData1 function in ImaSystem.dll for Citrix MetaFrame XP 1.0 and 2.0, and Presentation Server 3.0 and 4.0, allows remote attackers to execute arbitrary code via requests to the Independent Management Architecture (IMA) service (ImaSrv.exe) with invalid size values that trigger the overflow during decryption.
Affected configurations
• citrix metaframe 1.0
• citrix metaframe 3.0
• citrix metaframe presentation server 4.0
References
- http://secunia.com/advisories/22802 secunia.com
- http://securitytracker.com/id?1017205 securitytracker.com
- http://support.citrix.com/article/CTX111186 Patch
- http://www.securityfocus.com/archive/1/451337/100/100/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/20986 www.securityfocus.com
- http://www.vupen.com/english/advisories/2006/4429 www.vupen.com
- http://www.zerodayinitiative.com/advisories/ZDI-06-038.html www.zerodayinitiative.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/30148 exchange.xforce.ibmcloud.com
- http://secunia.com/advisories/22802 secunia.com
- http://securitytracker.com/id?1017205 securitytracker.com
- http://support.citrix.com/article/CTX111186 Patch
- http://www.securityfocus.com/archive/1/451337/100/100/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/20986 www.securityfocus.com
- http://www.vupen.com/english/advisories/2006/4429 www.vupen.com
- http://www.zerodayinitiative.com/advisories/ZDI-06-038.html www.zerodayinitiative.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/30148 exchange.xforce.ibmcloud.com